MisuseHealthcareHealthcareKnowledge AbuseEmployee Data InvolvedPIIIdentity (basic)Financial accountPHIHealth (basic)LowContained

Byram Healthcare

bd_77b2033b5b6f05a9 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 22, 2018

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Byram Healthcare →

Byram Healthcare notified Montana residents that a former employee stole credit card and limited health information. The breach involved unauthorized access by an insider. Remediation included staff training and increased monitoring. No SSN was accessed. Notification date is October 22, 2018.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Oct 22, 2018

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_de13ec90441e83462018-10-24 · +2dVerified

Name: Byram Healthcare
norm: byram healthcare

Name: Byram Healthcare
norm: byram healthcare
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Oct 22, 2018
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Financial accountPHIHealth (basic)
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalFinancial
Initial access: insider_action

During the incident: Provided reminders and further training to our staff related to appropriately safeguarding and protecting patient information
Increased out staff monitoring
Changes made: Provided reminders and further training to our staff related to appropriately safeguarding and protecting patient information
Increased out staff monitoring
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGOct 22 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Byram-Healthcare.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 22, 2018
Raw hash: b0a62660d5613c29e542c6855d88279faff78d87b19b62738bf333f56cb36a1d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityByram Healthcare

Victim entityByram Healthcare

IncidentInsider

Stated responseProvided reminders and further training to our staff related to appropriately safeguarding and protecting patient information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov